CVE-2026-4825

Medium CVSS: 5.3

A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown part of the file /update_sales.php of the component HTTP GET Parameter Handler. The manipulation of the argument sid results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used.

Vendor

Product

CWE

CWE-74

Yayın Tarihi

2026-03-25 23:17:10

Güncelleme

2026-03-30 13:26:50

Source Identifier

cna@vuldb.com

KEV Date Added

Kategoriler

CWE-74 MEDIUM 2026

Referanslar

https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/SQLi-UpdateSales-sid.md https://vuldb.com/?ctiid.353125 https://vuldb.com/?id.353125 https://vuldb.com/?submit.775175 https://www.sourcecodester.com/